CVE-2026-61432

Name of the Vulnerable Software and Affected Versions PraisonAI (praisonaiagents) versions prior to 1.6.78

Description A path traversal issue exists in the FastContext feature (praisonaiagents.context.fast). The execute tool() function in FastContextAgent only prepends the configured workspace path for relative paths and fails to reject absolute paths or canonicalize joined paths before enforcing workspace containment. This allows tool arguments or model-generated function calls to grep search(), glob search(), read file(), or list directory() to use absolute paths or ../ sequences. Consequently, an attacker can read, search, and enumerate files outside the intended workspace directory, leading to file contents being returned to the caller or injected into the model's tool-result context.

Recommendations Update PraisonAI (praisonaiagents) to version 1.6.78 or later.